Alexandre_1a/NixOSDots
1
0
Fork 0
mirror of https://github.com/Alexandre1a/NixOSDots.git synced 2026-03-10 00:09:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added Sops

Browse Source
This commit is contained in:
Alexandre 2025-12-27 04:01:57 +01:00
parent 0449fb149e
commit 940e5a0549
4 changed files with 22 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/common/home.nix
View File

@ -14,6 +14,7 @@
# Common Packages
home.packages = with pkgs; [
# CLI
sops
btop
hello
fastfetch

8
modules/nixos/secrets.nix Normal file
View File

@ -0,0 +1,8 @@
{
sops = {
defaultSopsFile = ../../secrets/secrets.yaml;
defaultSopsFormat = "yaml";
age.keyFile = "/home/alex/.config/sops/age/keys.txt";
};
}

10
modules/nixos/wireless.nix
View File

@ -1,7 +1,15 @@
{ config, ... }:
{
sops.secrets."secrets/freebox-password" = {
owner = "root";
group = "root";
mode = "0400";
};
networking.wireless.networks = {
Freebox-357429 = {
psk = "nv9dmq2sxwqcfhzmqvn4xb";
pskRaw = "ext:${config.sops.secres."secrets/freebox-password".path}";
};
};
}

6
secrets/secrets.yaml
View File

@ -1,6 +1,8 @@
hello: ENC[AES256_GCM,data:iUTvN5BcSq9z1rm8A9IGi/bC6Y9ktTb0ZJHVnT2FDxX18LBVw9fPJ/u1mzZ4AQ==,iv:RQKjSPXBGmvv2zxtCNWgzwa6M1U6ae8FEVdZ8un4z84=,tag:OgrBQgzjmHELcztURokRAw==,type:str]
example-key: ENC[AES256_GCM,data:b2Gx6CGtub7rAnd/kw==,iv:uWJTovo9X/VkXUW7HRfSuQfo2wZ7yjShfUeRghEQcW0=,tag:R0T8tbijxfAUu19wN9iQdw==,type:str]
#ENC[AES256_GCM,data:igl42zvcTfvOnZ5eKnWHpw==,iv:ImJmyaweKF5ADkwTarcVGaKb3zb2ycXPzq0KItU64+k=,tag:ydg9C6ZO47QsLoguq60JCg==,type:comment]
wireless:
freebox-password: ENC[AES256_GCM,data:2g9BrZnJska/4FuPdRLJrHMgC7C6lQ==,iv:rSSrGHHy0RhEHFeEPZjTU2+TXWdCgrkMH8Uaamilq1k=,tag:Rm4EOvFPoVOi+dADKg97QA==,type:str]
myservice:
my_subdir:
my_secret: ENC[AES256_GCM,data:LReh8HM87Fbj,iv:HJT6/8NYWePsSo1oBpoB62cnBS68ntkyYX7Pd0Q3DsA=,tag:sKSdst4zkQAHS+7JSDhbIg==,type:str]
@ -15,7 +17,7 @@ sops:
TGNWMXd1MmVaMndERGpFc1N0TklFNncKFvO2Y80Z0pLEdoKlmAJ0Me4SM/Y5v9bE
qh5J4MvY2MFK9wlgYtql6Xe/OQjzsFLa0sgWE9FBwRwMefWFOgGuRQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-12-27T00:54:06Z"
mac: ENC[AES256_GCM,data:1hvMwkfHxmnItx5XdCRx3vACIJ/+Zdf5r+YLnh2n6akn5LtlCtU+btDV3KgmBNg78RFaeqbJxlZfp6GPaaTbBky2IZ8hKFsQbxjdFfH7tgsQRz2VIsUgPSwuSAmWFbpxVMIf932FCqlVyzpiPBV3QzsMo+Iu7ehVHKB3tamoQ+U=,iv:aekLtJU6gShqWKHkLKoj0rxLJ1VhHiIQjzpvGyg5+xw=,tag:JKLwryAEG/suSjrIas7ihQ==,type:str]
lastmodified: "2025-12-27T02:57:35Z"
mac: ENC[AES256_GCM,data:bNJrWLD3uALsCLtC92W/hHxGXbm82OwaoLLJUgzrKzOyDaSOsboi4g8NGsi+xOSqyRYFkfIOSnk5Tw4DxDOtEkJPNPHk/0Wrn2bKHsmWTbLk3r9uoSJp2AwpXByFrbdc7x30uT/rivWJVVLFGoB98p0KrHAEhfJmDZEWCdFif2Q=,iv:1JYXNkD/ks5tKs167h0lbdzG4xUsXGAoZsDVQHwqY14=,tag:wqo3QRiN/L22OBVpL0AQgA==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0